Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/495f0ed4-cae4-3bc9-84f6-cb3317466e6c.roa
File: 495f0ed4-cae4-3bc9-84f6-cb3317466e6c.roa (raw, json)
Hash identifier: y/m0QcflpkmBCugmwRNN2szneVpoKZhXemzWCHUJcGw=
Subject key identifier: 70:D7:8A:30:F8:7C:F6:42:19:F6:4D:99:0A:DA:28:AA:10:36:B2:44
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858455E9AE9D732444C17CE76E2E0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/495f0ed4-cae4-3bc9-84f6-cb3317466e6c.roa
Signing time: Fri 29 Mar 2024 15:04:11 +0000
ROA not before: Fri 29 Mar 2024 15:04:11 +0000
ROA not after: Thu 27 Jun 2024 15:04:11 +0000
asID: 13576
IP address blocks: 66.128.189.0/24 maxlen: 24
66.128.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 13:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:5e:9a:e9:d7:32:44:4c:17:ce:76:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 29 15:04:11 2024 GMT
Not After : Jun 27 15:04:11 2024 GMT
Subject: CN=998790ab-7cd0-4595-aa19-681871b4a211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:50:ba:55:d3:a3:25:69:79:4d:bf:99:71:
e9:10:94:8b:c5:c5:60:d1:19:7b:1b:28:67:f1:f6:
55:71:94:7e:52:e2:30:15:ca:87:de:2c:c8:2f:3a:
01:9f:13:d5:1a:73:50:cd:d5:24:30:3f:fa:c7:54:
86:ff:e1:e1:d1:4e:d8:ba:b1:ba:52:7a:e0:0e:9c:
67:86:06:5a:fa:64:91:0f:3d:11:ca:cc:9d:82:83:
5a:c2:5a:4d:0a:58:a6:75:09:69:84:ac:5f:3c:0d:
de:3f:d7:27:02:f0:be:4e:be:fe:75:25:58:1e:54:
b8:aa:13:49:b5:fe:25:4f:81:21:78:55:31:a3:a7:
2b:ce:e8:bd:e7:f1:df:f9:3b:00:f5:b3:8d:e7:3c:
78:12:96:03:51:13:27:4d:dc:3a:ca:b4:8f:de:a4:
50:a6:a5:a8:5d:74:6e:99:d0:13:8f:e9:21:56:b3:
67:a7:3c:d2:72:a0:28:25:60:74:c6:f6:52:a5:84:
c0:34:09:33:33:e8:2a:5d:7a:f3:ae:ca:25:49:c3:
69:70:50:87:0e:aa:48:9d:22:00:3b:3f:a2:08:56:
5c:da:f6:07:c4:8b:a7:90:ce:7d:d6:48:a9:27:77:
c6:ee:d9:4f:5c:c2:52:31:df:fb:dc:99:17:4d:6f:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D7:8A:30:F8:7C:F6:42:19:F6:4D:99:0A:DA:28:AA:10:36:B2:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/495f0ed4-cae4-3bc9-84f6-cb3317466e6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.189.0-66.128.190.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3c:c1:f0:ee:c9:96:f6:6d:60:fe:b2:f2:6b:03:3f:95:0e:
e5:69:41:ca:75:bb:1c:3d:59:f6:ad:ab:99:9b:3a:f4:31:48:
b3:1b:5f:a0:47:b7:9c:38:11:93:ee:9c:4e:44:a5:e6:1f:67:
4b:da:e3:ec:1d:f3:93:15:76:ed:c7:05:0b:d7:77:ed:14:54:
ae:7e:98:58:ed:af:2a:7f:15:61:17:41:df:e4:21:9f:d5:5f:
48:d7:b2:5e:a3:3c:20:a3:46:24:04:01:bd:30:4e:3d:f8:0b:
58:d3:25:c1:5f:ad:d3:df:be:3a:13:e4:48:1b:8e:3c:6c:66:
00:88:35:d5:4d:c8:31:d2:af:e5:63:47:21:e5:e1:8c:ac:fc:
3d:e4:12:48:6c:db:f9:30:f1:02:6a:b1:f7:41:7f:07:9c:7b:
a6:4f:f5:96:a3:3f:e7:e6:61:bf:fc:ed:90:e7:c2:c1:76:13:
a3:b7:31:4f:0e:d5:ca:81:52:64:3b:d9:ab:0d:ea:5c:bf:6a:
f4:ee:15:36:ff:e5:9b:15:34:f5:d8:04:24:62:bb:b5:f1:91:
d3:d1:e5:4a:f3:48:70:fe:e7:58:ee:2f:12:a3:b2:4f:67:4b:
52:8a:20:19:2d:e4:c2:a3:8e:12:5f:8b:b5:aa:f0:e0:b3:f6:
b7:37:95:88
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEVemunXMkRMF8524uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MDMyOTE1MDQxMVoXDTI0MDYyNzE1MDQxMVowLzEtMCsGA1UEAxMk
OTk4NzkwYWItN2NkMC00NTk1LWFhMTktNjgxODcxYjRhMjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4StQulXToyVpeU2/mXHpEJSLxcVg0Rl7Gyhn
8fZVcZR+UuIwFcqH3izILzoBnxPVGnNQzdUkMD/6x1SG/+Hh0U7YurG6UnrgDpxn
hgZa+mSRDz0RysydgoNawlpNClimdQlphKxfPA3eP9cnAvC+Tr7+dSVYHlS4qhNJ
tf4lT4EheFUxo6crzui95/Hf+TsA9bON5zx4EpYDURMnTdw6yrSP3qRQpqWoXXRu
mdATj+khVrNnpzzScqAoJWB0xvZSpYTANAkzM+gqXXrzrsolScNpcFCHDqpInSIA
Oz+iCFZc2vYHxIunkM591kipJ3fG7tlPXMJSMd/73JkXTW/L0wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHDXijD4fPZCGfZNmQraKKoQNrJEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDk1ZjBlZDQtY2FlNC0z
YmM5LTg0ZjYtY2IzMzE3NDY2ZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABCgL0D
BABCgL4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAODzB8O7JlvZtYP6y8msDP5UO5WlBynW7HD1Z9q2rmZs6
9DFIsxtfoEe3nDgRk+6cTkSl5h9nS9rj7B3zkxV27ccFC9d37RRUrn6YWO2vKn8V
YRdB3+Qhn9VfSNeyXqM8IKNGJAQBvTBOPfgLWNMlwV+t09++OhPkSBuOPGxmAIg1
1U3IMdKv5WNHIeXhjKz8PeQSSGzb+TDxAmqx90F/B5x7pk/1lqM/5+Zhv/ztkOfC
wXYTo7cxTw7VyoFSZDvZqw3qXL9q9O4VNv/lmxU09dgEJGK7tfGR09HlSvNIcP7n
WO4vEqOyT2dLUoogGS3kwqOOEl+Ltarw4LP2tzeViA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org